ID de Prueba:	1.3.6.1.4.1.25623.1.0.64216
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2009:1109
Resumen:	The remote host is missing updates announced in;advisory RHSA-2009:1109.;;Adobe Reader allows users to view and print documents in Portable Document;Format (PDF).;;Multiple security flaws were discovered in Adobe Reader. A specially;crafted PDF file could cause Adobe Reader to crash or, potentially, execute;arbitrary code as the user running Adobe Reader when opened.;(CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512,;CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857,;CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028);;All Adobe Reader users should install these updated packages. They contain;Adobe Reader version 8.1.6, which is not vulnerable to these issues. All;running instances of Adobe Reader must be restarted for the update to take;effect.
Descripción:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1109. Adobe Reader allows users to view and print documents in Portable Document Format (PDF). Multiple security flaws were discovered in Adobe Reader. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2009-0198, CVE-2009-0509, CVE-2009-0510, CVE-2009-0511, CVE-2009-0512, CVE-2009-0888, CVE-2009-0889, CVE-2009-1855, CVE-2009-1856, CVE-2009-1857, CVE-2009-1858, CVE-2009-1859, CVE-2009-1861, CVE-2009-2028) All Adobe Reader users should install these updated packages. They contain Adobe Reader version 8.1.6, which is not vulnerable to these issues. All running instances of Adobe Reader must be restarted for the update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0198 BugTraq ID: 35274 http://www.securityfocus.com/bid/35274 BugTraq ID: 35302 http://www.securityfocus.com/bid/35302 Bugtraq: 20090610 Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow (Google Search) http://www.securityfocus.com/archive/1/504217/100/0/threaded Cert/CC Advisory: TA09-161A http://www.us-cert.gov/cas/techalerts/TA09-161A.html http://security.gentoo.org/glsa/glsa-200907-06.xml http://secunia.com/secunia_research/2009-24/ http://www.redhat.com/support/errata/RHSA-2009-1109.html http://securitytracker.com/id?1022361 http://secunia.com/advisories/34580 http://secunia.com/advisories/35496 http://secunia.com/advisories/35655 http://secunia.com/advisories/35685 http://secunia.com/advisories/35734 SuSE Security Announcement: SUSE-SA:2009:035 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00000.html SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.vupen.com/english/advisories/2009/1547 XForce ISS Database: reader-acrobat-jbig2-code-exec(51015) https://exchange.xforce.ibmcloud.com/vulnerabilities/51015 Common Vulnerability Exposure (CVE) ID: CVE-2009-0509 XForce ISS Database: reader-text-bo(49239) https://exchange.xforce.ibmcloud.com/vulnerabilities/49239 Common Vulnerability Exposure (CVE) ID: CVE-2009-0510 Common Vulnerability Exposure (CVE) ID: CVE-2009-0511 Common Vulnerability Exposure (CVE) ID: CVE-2009-0512 BugTraq ID: 35293 http://www.securityfocus.com/bid/35293 Common Vulnerability Exposure (CVE) ID: CVE-2009-0888 Common Vulnerability Exposure (CVE) ID: CVE-2009-0889 Common Vulnerability Exposure (CVE) ID: CVE-2009-1855 BugTraq ID: 35282 http://www.securityfocus.com/bid/35282 Bugtraq: 20090610 ZDI-09-042: Adobe Reader U3D RHAdobeMeta Stack Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/504229/100/0/threaded http://www.zerodayinitiative.com/advisories/ZDI-09-042 Common Vulnerability Exposure (CVE) ID: CVE-2009-1856 BugTraq ID: 35294 http://www.securityfocus.com/bid/35294 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=807 XForce ISS Database: acrobat-reader-unspecified-overflow(51021) https://exchange.xforce.ibmcloud.com/vulnerabilities/51021 Common Vulnerability Exposure (CVE) ID: CVE-2009-1857 BugTraq ID: 35296 http://www.securityfocus.com/bid/35296 Bugtraq: 20090611 FortiGuard Advisory: Adobe Reader/Acrobat TrueType Font Processing Memory Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/504239/100/0/threaded http://www.fortiguardcenter.com/advisory/FGA-2009-25.html Common Vulnerability Exposure (CVE) ID: CVE-2009-1858 BugTraq ID: 35298 http://www.securityfocus.com/bid/35298 XForce ISS Database: acrobat-reader-jbig2-code-execution(51016) https://exchange.xforce.ibmcloud.com/vulnerabilities/51016 Common Vulnerability Exposure (CVE) ID: CVE-2009-1859 BugTraq ID: 35289 http://www.securityfocus.com/bid/35289 Common Vulnerability Exposure (CVE) ID: CVE-2009-1861 BugTraq ID: 35295 http://www.securityfocus.com/bid/35295 CERT/CC vulnerability note: VU#568153 http://www.kb.cert.org/vuls/id/568153 Common Vulnerability Exposure (CVE) ID: CVE-2009-2028 XForce ISS Database: acrobat-reader-multiple-unspecified(51126) https://exchange.xforce.ibmcloud.com/vulnerabilities/51126
Copyright	Copyright (C) 2009 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.